Privacy Policy
The privacy policy set out below applies to the www.carpool.be website or the Mpact Carpool app and associated domain names and relates to the processing by Mpact vzw and Mpact asbl of personal data belonging to users, visitors, customers and website subscribers (app included). The Privacy Policy and consequent processing of personal information are in line with the General Data Protection Regulation (GDPR). This Privacy Policy sets out who is responsible for the personal data collected and processed via the website, the type of data collected, the conditions under which data are processed and the purpose for which they are processed, the amount of personal data shared with third parties, the measures taken to keep personal data secure and the means by which the user is able to check the processing of his/her personal data and assert his/her rights on the grounds of the privacy legislation.
Data entered to the website by the subscriber are treated as confidential in keeping with the privacy legislation.
The website is managed by Mpact, and the privacy data controller is Mpact vzw, which has its registered office at 9000 Ghent, Maria Hendrikaplein 65B. Contact details can be found at www.mpact.be/contact and in the disclaimer.
Mpact asbl, with registered office at 5030 Gembloux, Rue Buisson-Saint-Guibert 1, post box B, has access to the data collected via the website given that it is also a user of the software tool.
Mpact vzw may also use processors. The processor is the natural or legal person that processes the data on behalf of the personal data controller. The processor is responsible for processing the personal data on behalf of Mpact vzw and Mpact asbl and for ensuring the sound technical functioning of the website (data transmission). This policy does not extend to the people authorised to process the data under the direct authority of the controller.
It goes without saying that the data controller chooses its processors with great care. For example, the processor must offer sufficient guarantees in terms of the technical and organisational security measures it employs in relation to processing and satisfy the obligations set out under the General Data Processing Regulation.
Visitors can sign up to carpool.be and the Mpact Carpool app to search for car-pool partners and make travel arrangements. Mpact records and processes the personal data volunteered by the user when she/he uses the functionalities on the aforementioned website and the services offered through this website.
The personal data collected and processed by Mpact are: surname and first name, date of birth, gender, address and contact details such as telephone number and email address. Optionally, the license-plate number of the user’s car may be collected if the user chooses to register a vehicle in the carpool system. Providing a license plate number is not required to use the core matching features, but may be needed for functionalities such as pickup identification, safety, or access to parking / incentive programs.
In the case of employees, the place of work, employee reference number, shift and department may be added.
The personal data are used for the following purposes:
Personal data relating to employees (and trips) can only be accessed by the mobility coordinator, provided the employee gave explicit consent on registration. He/she may also change this setting at any time. The coordinator does not have access to messages exchanged between car-poolers or other data such as evaluations. In the case of corporate employees, the employee number and department are only used by the mobility coordinator for identification purposes and are not shared with other car-poolers. The place of work is primarily used as a destination preset when an employee enters trips. When searching trips, employees from the same company can identify trips offered by colleagues.
Employees' personal data can be passed on to the mobility coordinator and processed for support purposes and for commuter-mobility campaigns. However, this is only possible if the employee allows access to his/her personal data.
The personal data can also be used to inform users, through an electronic newsletter, of matters relating to car-pooling, sustainable mobility and Mpact news, but only if their explicit consent has been given.
Personal data are stored for two (2) years, for the convenience of anyone who would like to resubscribe. After two years of inactivity personal data are anonymised, and the carpool file in question is kept for statistical information only.
Every time the subscriber provides personal data, Mpact will handle this data in line with the established policy and the legal obligations pertaining to personal-data processing.
Mpact may also collect, through website log files, anonymous or aggregated data of a non-personal nature such as browser type, a subscriber’s operating programme, or the domain name of the website(s) that a subscriber used to arrive at the Mpact website or the link a subscriber used to leave it. This helps us to permanently optimise the Mpact website(s) for users or subscribers.
These website log files are stored by Mpact for six (6) months maximum. This browsing information is deleted after anonymized processing but may be used to establish responsibility if the website becomes the target or vehicle of a criminal offence.
Personal data may also be imported from a mobility coordinator's organisation to Carpool, but only with the explicit consent of the employee. The employee will be notified of the purposes of the data processing, and of his/her right to access, rectification and erasure of the data. Mpact is not responsible for data from third parties.
Personal data entered to the website are stored and processed through an Mpact-managed electronic system in a locked, secure environment which does not allow public access.
These data can only be accessed by a set number of people in the employ of Mpact vzw and Mpact asbl, who are authorised to view and process the data.
This also applies to license-plate data, which are stored securely and treated as personal information under GDPR.
5. RIGHT TO ACCESS, RECTIFICATION AND ERASURE OF PERSONAL DATA
The subscriber has a legal right to access and rectify the personal data.
The subscriber may also freely object to us sharing his/her personal data with third parties, combining his/her personal data to create a profile and sending information and offers by mail or email.
The subscriber also has the right to request that his/her personal data be erased or deleted if there is no overriding reason for further processing or if the subscriber objects to its processing and there are no legitimate overriding reasons to justify that processing.
If a user has registered a license-plate number, he/she may update or delete it at any time via account settings or request its erasure by contacting Mpact as described below. Deleting the license plate will stop it from being shown in future matches; it does not affect lawful records kept for past trips where required.
A subscriber may, provided he/she demonstrates his/her identity (copy of identity card), send written, dated and signed notice to Mpact vzw, at Koningin Maria Hendrikaplein 65B, 9000 Ghent, info@mpact.be, requesting a paper copy of his/her personal data.
If necessary, the subscriber may also request the rectification of any data which are incorrect, incomplete or not pertinent, or erasure of the data in compliance with the applicable legislation.
If Mpact cannot or cannot entirely establish the personal data to which the subscriber's request for access, rectification or erasure relates, Mpact may ask the subscriber for a (more) specific request.
The subscriber has the right to data portability, which places him/her in a position to access personal data shared with Mpact in a structured, standard and electronic form, and to reuse it for his/her own purposes across several services.
When personal data are used to keep the subscriber up to date on new facts, events and services provided by Mpact, the user may — if he/she does not wish to receive this information — notify Mpact of this preference. In addition, all email information notices and electronic newsletters issued by Mpact contain an unsubscribe link. Mpact may provide the user with information via newsletters for up to two (2) years after last use.
The subscriber is also free to lodge a complaint with the supervisory authority if he/she is of the opinion that Mpact has not respected his/her rights: Belgische Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussel (Tel.: +32 2274 4800; Email: contact@apd-gba.be).
Cookies are small files used to store information about a website visitor. They are linked to your browser.
The carpool.be website uses just a few cookies. They apply to every subdomain of the website (www.carpool.be, events.carpool.be etc.). When visiting the website visitors are asked for their explicit consent to accept non-essential cookies.
Cookies can be roughly divided according to duration, origin and purpose.
The following cookies are used on carpool.be:
| Name | Purpose | Duration |
|---|---|---|
| TX_CARPOOL | User log-in | Session |
| Name | Purpose | Duration |
|---|---|---|
| cookie_consent | Storage of cookie preferences | 1 year |
| cplLangSaver | Language choice | 1 year |
| Name | Purpose | Duration |
|---|---|---|
| _ga | Used to distinguish users | 2 years |
| _ga_PXDES1JJCB | Used to persist session state | 2 years |
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| _fbp | Facebook Pixel tracking (ID: 2560114041032335) | 3 months | |
| fr | Facebook advertising and remarketing | 3 months | |
| _gcl_au | Google Ads conversion tracking | 3 months | Google Ads |
| gac* | Google Ads campaign attribution | 90 days | Google Ads |
| _fbq | Facebook Pixel queue management | Session |
Carpool.be places Google Analytics cookies via a Google script on the website. Google Analytics mostly uses first-party cookies, as browsers often block third-party cookies.
With your explicit consent, Carpool.be also uses marketing cookies from Facebook and Google Ads.
CRM Integration:
Data from TeamLeader CRM may be used to create custom audiences and measure advertising effectiveness.
Data Transfer and Storage:
Data is transferred to Facebook (Meta) and Google in the US/Ireland under adequacy decisions and Standard Contractual Clauses. Facebook stores data for up to two (2) years, Google Ads for up to eighteen (18) months, or until consent withdrawal.
You can change your cookie preferences at any time by clicking the icon bottom left of the website.
7. MAILCHIMP
Mpact uses Mailchimp for its newsletters.
Newsletters will not be sent without the subscriber’s explicit consent.
Subscribers may unsubscribe at any time via the link contained in every newsletter.
Mailchimp acts as a data processor on behalf of Mpact, and appropriate contractual safeguards are in place to ensure that newsletter data are handled in accordance with the GDPR.
Mpact may change the content of this Privacy Policy at any time, provided the change is conformant with current European and national legislation.
Changes will be announced on the homepage of the website and/or by email and come into effect seven (7) days after the announcement.
Mpact.be also reserves the right to change the content of this website at any time without prior notice.
Users are encouraged to consult this page regularly in order to remain informed about the latest version of the Privacy Policy.
Version of October 28th 2025
cookie consent